Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File:                     c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier:          0abKzrFw3MCPN3wMhY7Omo8vb60wdvBLe2k9ais6utQ=
Subject key identifier:   F5:DD:05:FD:F3:CF:59:7D:24:5D:9A:AC:71:81:C9:4C:77:83:6F:0A
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer:       /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial:       01962E61C7616A15B349B8CD11F187E74DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number:          AD
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: QL7hQ7U90mnISl4Brg9oaycavxeLqMdZ3n4RLKfOPrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c7:61:6a:15:b3:49:b8:cd:11:f1:87:e7:4d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=f5dd05fdf3cf597d245d9aac7181c94c77836f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:07:05:4a:58:91:a8:44:ce:ae:c5:7b:0c:
                    58:a4:90:e0:a6:28:4c:9d:4b:77:e4:48:95:a0:83:
                    91:04:e6:72:f6:ae:58:a1:27:27:e8:e4:4d:b3:4c:
                    97:7e:34:a0:48:92:85:ca:ad:27:f8:cd:dd:0b:35:
                    05:10:f4:08:59:f5:79:f3:b4:d4:2b:fd:32:bc:86:
                    4f:d7:de:36:c9:a7:51:20:f8:8f:70:14:54:46:6d:
                    ee:65:b5:2b:df:fe:a4:1f:a4:ed:74:4b:ff:28:49:
                    e4:42:eb:6f:8f:40:ac:da:9a:e8:46:34:92:53:c5:
                    f9:88:7f:66:1f:26:d3:0b:a9:11:d5:3c:4a:d5:8b:
                    ff:77:6b:b9:48:89:bc:c4:ac:11:6f:7e:94:46:64:
                    ba:e5:6b:54:ec:47:05:7e:5e:fd:0b:33:73:d3:2f:
                    c4:65:e1:c0:17:d8:8c:77:d3:15:c2:f2:af:99:10:
                    e1:95:3e:50:1e:14:ee:98:b9:2a:44:21:0d:db:4f:
                    9d:4b:3e:df:34:2f:00:0d:9d:ed:b1:a4:fc:52:79:
                    21:d3:b9:4b:0b:9d:34:b4:a5:f9:7e:a6:aa:07:c4:
                    9a:bd:ef:65:4c:13:d8:d0:35:91:78:91:ba:28:b2:
                    10:c1:7b:64:f7:18:9a:a0:77:dc:fc:3b:db:32:0e:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DD:05:FD:F3:CF:59:7D:24:5D:9A:AC:71:81:C9:4C:77:83:6F:0A
            X509v3 Authority Key Identifier:
                keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:25:ee:a8:35:b1:6d:a8:18:fd:87:99:15:a7:3d:a1:64:
         f4:8d:74:9b:4f:ce:6d:27:d1:0b:2f:3b:d7:0c:f8:af:61:7b:
         1a:34:76:15:97:5b:f1:8e:a1:06:69:9b:81:43:b9:a3:e6:86:
         fb:3b:aa:67:fc:2a:1b:91:54:92:dc:76:5b:72:d5:00:1e:db:
         40:dc:bf:57:c6:bf:d4:3e:36:62:88:70:d1:15:a6:e4:b6:cb:
         42:79:0d:2d:10:96:1c:aa:29:72:2a:f4:87:74:56:10:89:ce:
         f1:f5:de:fe:24:93:43:4b:7a:0a:d2:21:d6:13:bb:5a:8f:02:
         1d:18:b3:93:cc:6c:0d:31:bf:55:2e:64:a3:a3:d8:1c:83:1a:
         64:55:45:76:31:80:aa:a5:d3:0d:87:70:16:b5:f7:ed:16:aa:
         6d:6a:98:4f:1f:9f:63:2d:37:c1:19:5c:be:02:d6:d8:81:0f:
         41:3d:22:aa:0a:9f:3a:f4:fa:09:04:bf:68:f0:a9:31:b8:dc:
         d2:e1:e2:4e:e6:c0:8c:41:dc:af:9c:fc:c8:0c:17:e6:6d:74:
         8e:c3:13:ef:d0:5c:9e:8e:a1:36:69:74:4d:bf:67:f3:9b:eb:
         bb:25:17:44:fd:ce:20:9f:93:9c:be:6a:83:b7:70:cb:6c:5f:
         67:03:37:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcdhahWzSbjNEfGH503MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5
NjVmYTkwHhcNMjUwNDEzMDkwMTIxWhcNMjUwNDE0MDkwMTIxWjAzMTEwLwYDVQQD
EyhmNWRkMDVmZGYzY2Y1OTdkMjQ1ZDlhYWM3MTgxYzk0Yzc3ODM2ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFMHBUpYkahEzq7FewxYpJDgpihM
nUt35EiVoIORBOZy9q5YoScn6ORNs0yXfjSgSJKFyq0n+M3dCzUFEPQIWfV587TU
K/0yvIZP1942yadRIPiPcBRURm3uZbUr3/6kH6TtdEv/KEnkQutvj0Cs2proRjSS
U8X5iH9mHybTC6kR1TxK1Yv/d2u5SIm8xKwRb36URmS65WtU7EcFfl79CzNz0y/E
ZeHAF9iMd9MVwvKvmRDhlT5QHhTumLkqRCEN20+dSz7fNC8ADZ3tsaT8Unkh07lL
C500tKX5fqaqB8Save9lTBPY0DWReJG6KLIQwXtk9xiaoHfc/DvbMg5xtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXdBf3zz1l9JF2arHGByUx3g28KMB8GA1UdIwQY
MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt
YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll
LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOEl7qg1
sW2oGP2HmRWnPaFk9I10m0/ObSfRCy871wz4r2F7GjR2FZdb8Y6hBmmbgUO5o+aG
+zuqZ/wqG5FUktx2W3LVAB7bQNy/V8a/1D42Yohw0RWm5LbLQnkNLRCWHKopcir0
h3RWEInO8fXe/iSTQ0t6CtIh1hO7Wo8CHRizk8xsDTG/VS5ko6PYHIMaZFVFdjGA
qqXTDYdwFrX37RaqbWqYTx+fYy03wRlcvgLW2IEPQT0iqgqfOvT6CQS/aPCpMbjc
0uHiTubAjEHcr5z8yAwX5m10jsMT79Bcno6hNml0Tb9n85vruyUXRP3OIJ+TnL5q
g7dwy2xfZwM3JQ==
-----END CERTIFICATE-----